“This inclusivity means that Let’s Encrypt’s certificates have all been actually valid for 90 days plus 1 second.”
RFC 5280 counts the last second of a certificate as valid, so every Let’s Encrypt cert ever issued ran one second long. Nobody was harmed. Let’s Encrypt filed a public incident report on Bugzilla anyway. That is the bar every certificate authority should be held to, and most would fail it.